Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
File:                     eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json)
Hash identifier:          yPR/pezAN+tla3AudHde+7nj06txOPwQK9jBo1RQIcA=
Subject key identifier:   51:6D:DD:BD:30:37:6B:0E:81:AB:47:38:8B:87:02:7C:23:57:3A:26
Certificate issuer:       /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Certificate serial:       010D0C9F4328584634B74B0B940D7E1534710E80
Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
Signing time:             Fri 14 Jun 2024 07:44:22 +0000
ROA not before:           Fri 14 Jun 2024 07:44:22 +0000
ROA not after:            Thu 12 Sep 2024 07:44:22 +0000
asID:                     401021
IP address blocks:        23.176.152.0/24 maxlen: 24
                          2620:0:8000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:34:b7:4b:0b:94:0d:7e:15:34:71:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
        Validity
            Not Before: Jun 14 07:44:22 2024 GMT
            Not After : Sep 12 07:44:22 2024 GMT
        Subject: CN=5d941e39-a481-40ce-9141-b82982a8a442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:ef:b0:5c:30:5d:e5:40:dc:3b:6e:6f:1a:
                    5d:38:b8:25:dc:d5:99:54:91:53:4c:1f:9f:bf:23:
                    7e:32:14:15:5e:ff:65:7f:68:23:f1:cf:9d:36:80:
                    e8:5a:7c:5c:b7:df:74:59:9b:52:15:d3:84:ce:83:
                    0c:72:2e:83:b1:ed:30:e1:4b:e0:1b:1b:22:01:0c:
                    34:a6:2e:29:15:e6:50:40:a9:1e:18:9a:6e:af:17:
                    66:e8:c9:89:35:d1:bf:ee:95:fc:b6:df:51:4e:21:
                    4f:8a:42:4b:9f:09:a5:ab:59:c4:96:70:58:6c:22:
                    d8:e2:5c:8a:8e:dc:42:0f:ed:88:86:aa:06:07:d8:
                    fd:6b:63:0f:47:61:04:4f:a2:c1:25:b7:f6:26:e3:
                    de:61:db:43:86:ab:e7:92:42:ae:54:fc:77:d8:f7:
                    2e:f0:77:4f:eb:2a:b9:0b:e4:b5:b2:98:8b:48:06:
                    40:08:7b:b0:3b:9c:f3:de:e4:ee:ea:cb:f3:80:1e:
                    3c:a6:3e:42:39:f5:62:dd:af:77:1b:c2:34:72:9e:
                    b6:5b:56:25:83:02:61:7e:8c:a4:bb:72:70:8e:9e:
                    21:07:9e:51:1f:ab:73:f9:cd:a4:c9:4c:9b:ca:d8:
                    04:44:45:2c:70:c2:c7:8c:f5:69:8e:eb:8b:e1:91:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:DD:BD:30:37:6B:0E:81:AB:47:38:8B:87:02:7C:23:57:3A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl

            X509v3 Authority Key Identifier:
                keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.152.0/24
                IPv6:
                  2620:0:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:83:80:2b:e1:dd:63:c0:91:45:ff:43:9a:32:ab:c9:8b:af:
         6a:f2:bc:e6:2b:3d:00:03:2a:2f:99:a8:6e:cc:2c:c9:d2:3c:
         50:87:5c:78:5b:e5:db:48:6f:76:f8:a7:c6:c4:c8:0e:c8:62:
         21:ad:62:9c:d1:a9:f7:1f:dc:e2:28:48:9b:6b:4c:97:82:06:
         cd:b7:cc:40:10:cd:c2:4d:96:17:4a:7a:47:8b:e9:b0:d7:39:
         1d:b1:01:13:d1:16:4e:50:ca:3e:a0:75:b3:ff:c4:b0:4b:4a:
         f0:9d:71:93:4d:89:20:51:5b:32:16:b4:d2:51:c4:ec:f9:6c:
         90:ec:50:5b:0a:ab:18:cf:26:40:fe:01:cb:23:a0:bc:0a:af:
         ae:7b:6b:fe:39:7e:83:95:7d:88:af:2f:7e:08:4c:7e:87:57:
         e7:e1:87:2d:c5:1f:b3:e2:db:a2:d1:33:ea:48:55:84:67:18:
         f5:cf:e1:7e:b5:4e:6f:b2:49:12:f3:61:48:31:12:cb:ba:7c:
         d0:8a:a4:f2:41:ab:bf:64:b0:8b:6c:bf:30:11:6c:e2:03:9a:
         5e:d4:35:14:b0:ea:1f:8f:32:d2:e7:a1:ed:60:a1:ee:2f:42:
         6f:57:4e:e4:dc:db:02:f3:41:31:d9:b5:c3:53:9a:df:40:b7:
         ff:44:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:55:41 2024 by rpki-client on console-ams.rpki-client.org